Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
File: API1ekH05ZC6Yudx0gVOAI4O2R4.mft (raw, json)
Hash identifier: cQKPutm9azuQhBbUmRx8mpLtXDl7oGeFrxdvvES219c=
Subject key identifier: 65:11:20:A8:51:21:B7:A2:91:2F:EF:AF:91:2A:8D:0E:31:42:94:98
Authority key identifier: 00:F2:35:7A:41:F4:E5:90:BA:62:E7:71:D2:05:4E:00:8E:0E:D9:1E
Certificate issuer: /CN=00f2357a41f4e590ba62e771d2054e008e0ed91e
Certificate serial: 0198D7A8EE81C40C183908FF0DC2BBA73FBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
Manifest number: 0765
Signing time: Sat 23 Aug 2025 16:00:29 +0000
Manifest this update: Sat 23 Aug 2025 16:00:29 +0000
Manifest next update: Sun 24 Aug 2025 16:00:29 +0000
Files and hashes: 1: API1ekH05ZC6Yudx0gVOAI4O2R4.crl (hash: BeETVKearxTBJapkWUbL7U5N5Ba5NLO2q+pSyaveZ00=)
2: wvcELSI8p3zOC9FNSdvAaOhzdZI.roa (hash: aWdD7yZCiGD/jhoFXeJkT3mN7GJI55ijye/m8elp9fQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:ee:81:c4:0c:18:39:08:ff:0d:c2:bb:a7:3f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00f2357a41f4e590ba62e771d2054e008e0ed91e
Validity
Not Before: Aug 23 16:00:29 2025 GMT
Not After : Aug 24 16:00:29 2025 GMT
Subject: CN=651120a85121b7a2912fefaf912a8d0e31429498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:61:e2:77:f5:30:55:9d:77:eb:86:8d:5c:21:
8a:d5:08:62:b8:5c:08:50:68:a0:93:14:ec:28:88:
ee:a7:9b:87:4f:d0:3e:8b:6e:57:0b:30:30:17:8f:
f2:d7:9e:c2:bc:50:7a:9c:05:d1:97:d6:3f:bd:03:
75:00:c2:de:4e:9b:ea:1e:02:22:d9:37:f4:68:0e:
eb:fc:0d:e8:f5:67:52:fb:a6:18:66:a5:9f:ec:80:
7d:2e:7c:74:ad:db:10:d0:26:48:ad:09:ea:eb:96:
d1:97:e2:66:5c:fe:08:f5:25:c0:0b:15:91:ca:c4:
6c:5f:1d:0a:ce:02:04:11:6d:81:51:e1:b8:93:dd:
29:67:2f:d0:c2:09:d7:d9:3f:ae:94:94:13:ba:d8:
fc:85:64:d9:3b:91:a7:d7:23:f3:83:c6:7d:71:58:
85:43:4d:42:a3:0e:dc:86:de:6c:da:9a:cc:3d:ab:
c1:ad:cc:e7:ab:bd:12:b8:d1:f1:1a:53:7f:55:80:
37:5f:49:d1:57:c0:5e:b1:d9:7c:b1:bf:2e:42:74:
18:4a:99:bc:65:4e:f3:cc:cc:b0:19:2f:89:f7:b5:
a8:ab:83:f0:0f:e3:aa:b7:1f:a5:49:10:46:17:05:
2d:cc:81:2c:7e:3f:40:8b:a5:d5:39:82:52:cb:db:
26:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:11:20:A8:51:21:B7:A2:91:2F:EF:AF:91:2A:8D:0E:31:42:94:98
X509v3 Authority Key Identifier:
keyid:00:F2:35:7A:41:F4:E5:90:BA:62:E7:71:D2:05:4E:00:8E:0E:D9:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:5c:9a:ec:bc:cf:c8:eb:e0:67:62:81:b4:78:3f:4d:12:3c:
28:33:c9:95:11:7d:d6:be:17:05:82:14:f1:9f:b3:a1:35:8c:
5c:2a:14:b2:e2:c0:9d:3c:da:14:e2:73:eb:7a:e4:9b:02:38:
dc:cf:51:5e:d0:37:7c:eb:20:24:29:0b:bd:1e:21:2f:44:22:
ac:87:e4:d4:7d:c2:28:61:6d:f3:e9:7a:95:a2:0f:ea:a5:ba:
fb:e0:18:c0:b1:37:da:df:ee:13:7c:3d:06:0f:4d:57:73:ca:
90:be:bf:9f:09:a2:43:49:41:7c:ea:31:9c:46:bd:db:fe:e1:
8b:ff:7a:c3:8d:f7:10:cb:9f:b3:2e:d9:8a:81:db:e2:09:cf:
08:b5:a7:b3:f6:b4:55:6b:d6:5a:ad:49:ba:e1:fd:b8:f8:48:
8a:10:ac:de:62:fb:a0:ba:30:ce:1b:c0:0b:ee:4d:52:7d:46:
f5:fe:09:4f:2c:1c:34:04:10:c0:f9:de:cd:79:ea:80:1d:84:
9e:96:96:c4:f0:70:49:1c:9b:89:83:d6:34:df:d2:6c:be:a9:
1e:b2:56:6b:24:f0:16:00:c4:97:b0:bd:1e:de:f1:d4:6e:97:
34:58:34:89:bc:8a:f3:61:61:74:69:d9:68:8b:74:3f:92:d0:
25:d0:a0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:52:54 2025 by rpki-client